Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/93F991501F4C11F19ED52041133D8C67.roa
File:                     93F991501F4C11F19ED52041133D8C67.roa (raw, json)
Hash identifier:          riV+YFoj73RGskIzJAtr/Lp7lGHXyMFCcQQ1eQ66pUQ=
Subject key identifier:   31:A6:B4:AE:9B:18:3F:67:C8:1E:42:B4:5F:EC:1C:CD:37:FF:77:DB
Certificate issuer:       /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
Certificate serial:       3520
Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/93F991501F4C11F19ED52041133D8C67.roa
Signing time:             Sat 14 Mar 2026 02:21:59 +0000
ROA not before:           Sat 14 Mar 2026 02:21:59 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     10794
IP address blocks:        203.11.130.0/24 maxlen: 24
                          203.11.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13600 (0x3520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
        Validity
            Not Before: Mar 14 02:21:59 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b4c646-32d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:18:e3:85:2e:ae:0e:8e:5a:89:1a:49:aa:
                    5e:13:c2:90:b3:d4:d0:cf:d0:af:e1:84:75:45:62:
                    26:b3:94:3c:18:c8:89:a1:4c:70:f6:2f:38:0d:78:
                    d2:72:8d:8c:62:24:ca:c5:8d:3f:6b:2b:13:50:03:
                    17:06:77:ec:2f:8d:7c:44:0e:b0:a6:9b:b8:cf:bd:
                    82:b9:6b:7d:f5:23:c9:eb:3e:44:59:7e:b9:08:4f:
                    d4:af:95:c0:1b:0f:a7:18:d6:92:65:6f:cf:04:6b:
                    81:32:8f:87:64:c3:93:00:2a:ed:70:86:89:98:3d:
                    dd:78:d8:43:4e:e5:ab:bf:5c:c0:2f:47:b4:27:92:
                    7b:ae:c4:d9:10:88:9b:b2:11:97:c1:3e:af:d3:de:
                    5f:4f:24:91:cd:14:06:83:e4:da:04:9f:1b:6e:e9:
                    96:74:de:64:a9:1a:ee:70:0a:8d:4c:5e:1c:5e:aa:
                    d0:46:0d:87:da:fa:b2:39:0b:49:2e:29:33:ff:66:
                    0b:79:2e:26:fb:e8:10:d8:e7:37:f1:84:e9:36:9e:
                    90:85:79:ca:d7:ad:88:22:79:11:83:48:13:50:56:
                    01:25:57:4a:64:a1:d5:0f:f5:17:02:b1:16:bb:04:
                    59:3d:a6:4c:92:9d:14:9b:5c:8c:de:e9:c3:b6:0e:
                    ee:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A6:B4:AE:9B:18:3F:67:C8:1E:42:B4:5F:EC:1C:CD:37:FF:77:DB
            X509v3 Authority Key Identifier:
                keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/93F991501F4C11F19ED52041133D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.11.130.0/24
                  203.11.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:c5:37:98:81:f6:bb:1d:f6:ae:e7:88:1c:d4:89:ec:d6:50:
         ee:69:b0:46:09:56:e8:53:01:31:1c:9a:d7:e3:1e:dc:db:df:
         99:41:4e:cb:05:06:bc:8c:77:11:a4:b0:e7:e2:8a:66:3c:93:
         c8:51:65:89:c7:19:e6:e2:a3:f7:cb:5d:cd:1c:55:74:88:13:
         24:8a:f2:7f:40:8e:2c:e1:b0:32:92:72:0a:f4:59:d5:e2:10:
         9f:47:84:33:b3:aa:86:fa:7b:a0:5e:b2:c7:65:4c:1b:92:aa:
         2c:bc:51:04:56:46:ba:f9:42:94:55:5e:5c:f4:72:1a:e4:f2:
         09:19:77:74:d1:25:37:09:0a:82:d3:55:fd:80:1f:8c:d9:ae:
         5b:6d:c0:47:1f:4e:ce:66:8a:f8:fd:e6:9f:cf:b6:49:b1:b6:
         1c:4c:0c:1a:94:d5:54:6d:38:e7:7c:a6:ed:55:b8:cd:a8:51:
         ab:96:f3:e9:42:fa:9b:b7:69:ea:8d:92:ca:ea:55:4d:3a:69:
         8c:69:ea:24:7a:db:c9:40:6d:06:4f:22:b1:75:6c:85:4c:af:
         82:65:a2:73:f7:c5:23:f8:c9:78:5b:47:68:0b:b2:c8:21:d0:
         cf:98:21:e1:2c:aa:91:e6:12:8c:5d:fd:21:19:91:f4:4a:7a:
         74:63:13:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:15 2026 by rpki-client